What is GHSA-g5fx-ccwv-5c4f?

GHSA-g5fx-ccwv-5c4f is a security advisory published by GitHub Security Advisories with High severity. Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters

Which CVE IDs does GHSA-g5fx-ccwv-5c4f cover?

GHSA-g5fx-ccwv-5c4f covers the following CVE IDs: CVE-2012-2966. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-g5fx-ccwv-5c4f?

GHSA-g5fx-ccwv-5c4f affects 1 product, including: maven/com.caucho:resin:\u003c 4.0.29.

GHSA-g5fx-ccwv-5c4fHigh

Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

April 12, 2025

🔗 CVE IDs covered (1)

CVE-2012-2966 →

📋 Description

Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.

🎯 Affected products1

maven/com.caucho:resin:< 4.0.29

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2012-2966
http://caucho.com/resin-4.0/changes/changes.xtp
http://www.kb.cert.org/vuls/id/309979
http://en.securitylab.ru/lab
https://web.archive.org/web/20131210160901/http://en.securitylab.ru:80/lab/PT-2012-05
https://github.com/advisories/GHSA-g5fx-ccwv-5c4f